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LEE & HAYES, PLLC 



April 14, 2006 



Re: Japanese Patent Application No. 2002-059394 
YourRef: MS1-766JP 
OurRef: PH131248 

Title: A METHOD AND SYSTEM FOR MULTIPLE USER 
AUTHENTICATION FOR ONLINE 
CONSOLE-BASED GAMING 
In the name of: MICROSOFT CORPORATION 



Dear Ms. Sassman: 



This is to inform you that we received a first Official Notice of Rejection regarding the above 
referenced application from the Japan Patent Office. The reasons are as stated in the Official 
Notice. 



Enclosed please find 

( * ) the Official Notice; 

( * ) the cited reference(s); 

( * ) the prior art literature(s); and 

( * ) our comments. 



The due date for responding to this rejection is June 22, 2006 , although a three-month 
extension of term can be obtained, if necessary. 



Please let us have your instructions by June 1, 2006 at the latest. 
Kindly acknowledge receipt of this letter by return facsimile. 



Very truly yours, 

Tani & Abe 



:jt 

Ends. 



( Translation ) 



OFFICIAL NOTICE OF REJECTION mailed on March 22, 

Japanese Patent Application No. 2002-059394 



Reasons 



[Reason 1] 

The present application is deficient in the points below. 
Therefore, the present application fails to conform to the 
requirements prescribed under Section 37 of the Japanese Patent 
Law. 



Remarks 



The common problem to be solved by the inventions of claims 
1 to 38, and 51 to 63, and the inventions of claims 39 to 50 
is to prevent impostor cheating; and to guarantee that a game 
console is really a trusted one, but not an imposter or one that 
has been compromised. However, this problem to be solved is 
well known, without the need to give an example. Therefore, 
this problem to be solved was not unresolved at the time of filing 
the present application. Thus, 

both of the claimed inventions fail to satisfy the relationship 
prescribed under Section 37, Item 1 of the Japanese Patent Law. 

Further , both of the claimed inventions fail to have a common 
substantial part which is a novel feature specific to the 
inventions, corresponding to the problem to be solved. Thus, 
both of the claimed inventions fail to satisfy the relationship 
prescribed under Section 37, Item 2 of the Japanese Patent Law. 

Still further, both of the claimed inventions fail to 
satisfy any of the relationships prescribed under Section 37 , 
Items 3, 4, and 5 of the Japanese Patent Law. 



Incidentally, since this application violates the 
provision of Section 37 of the Japanese Patent Law, the inventions 
of the claims other than claims 1 to 38, and 51 to 63 have not 
been examined as to requirements such as novelty and inventive 
step . 
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[Reason 2] 

The matters recited in the following claims of the present 
application are not deemed as being (an) industrially applicable 
invention(s) . Therefore, the present invention(s) is(are) 
unpatentable as failing to meet the requirements provided under 
the main clause of Section 29, Paragraph 1 of the Japanese Patent 
Law. 

Remarks 

(*Agent Remarks: We {Tani & Abe) can attend to the rejection 
raised here because of the Japanese Version. ) 

[Reason 3] 

The recitations of claims of the present application are 
deficient in the points below. Therefore, the present 
application fails to conform to the requirements prescribedunder 
Section 36, Paragraph 6, Item 1 of the Japanese Patent Law. 

Remarks 

Claim 15 recites as follows : 

"submitting the request from the game console to a ticket 
issuing entity; 

creating, at the ticket issuing entity, a ticket containing 
the identity string and a session key Kxa encrypted with a key 
K A associated with the online service, as follows: 

Ticket=E KA [K XA , X, G, A, Ui, U 2 , U D ] ; 

sending the ticket along with the session key Kxa from the 
ticket issuing entity to the game console ; 

passing the ticket from the game console to the online 
service along with data encrypted using the session key Kxa; 
and 

... at the online service ..." 

In other words, claim 15 recites retrieving the session 
key from the ticket encrypted with the key associated with the 
online service, and passing the ticket to the online service 
along with data encrypted using the session key, in the game 
console . 
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On the other hand, on page 18, lines 6 to 8 of the English 
text , the Detailed Description of the Invention includes a 
description that "since the game console 102 does not know the 
online service's key K A , the game console 102 cannot open the 
ticket and alter the contents". In view of the above, the 
Detailed Description of the Invention fails to include the 
feature of opening the ticket in the game console. 

Thus, the invention of claim 15 differs from what is 
described in the Detailed Description of the Invention. 

[Reason 4] 

The recitations of claims of the present application are 
deficient in the points below. Therefore, the present 
application fails to conform to the requirements prescribed under 
Section 36, Paragraph 6, Item 2 of the Japanese Patent Law. 

Remarks 

(l)-{5) (*Agent Remarks: We (Tani & Abe) can attend to the 
rejections raised here because of the Japanese Version.) 

(6) Claim 1 recites "returning a reply from the 
authentication entity to the gaming system that can be used to 
authenticate the multiple users in the online gaming activity" . 
However, from this recitation, it is impossible to specifically 
assume what the content of the reply is. Further, it is 
impossible to grasp how "the reply from the authentication entity 
to the gaming system that can be used to authenticate the multiple 
users in the online gaming activity" is distinguished from 
"identities of the users". Thus, the invention of claim 1 is 
unclear . 

Further, from among the inventions of claims 2 to 63, the 
invention(s) of theclaim(s) for which the same rejection applies 
is (are) unclear. 

(7) As to "authenticating the multiple users together " 
in claim 1 , it is unclear whether "recognizing or authenticating 
each of the multiple users " or " distinguishing the multiple users 
from each other " is meant by this recitation . Thus, theinvention 
of claim 1 is unclear. 
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Further, from among the inventions of claims 2 to 63, the 
inventions (s) of the claim(s) for which the same rejection 
applies is (are) unclear. 

(8) Claim 2 recites "forming, at the gaming system, a 
request containing an identity string that includes a gaming 
system identity, multiple user identities, and an identity of 
an online service". However, it is impossible to grasp how to 
obtain "a gaming system identity, multiple user identities , and 
an identity of an online service" in the gaming system. Further, 
claim 1 recites submitting the request from the gaming system, 
but not that the gaming system submits a reply. Therefore, it 
is impossible to grasp how the matter recited in claim 2 limits 
the invention of claim 1. Thus, the invention of claim 2 is 
unclear . 

Further, from among the inventions of claims 3 to 63, the 
invention(s) of the claim(s) for which the same re jection applies 
is (are) unclear. 

(9) There appears "a key associated with the online 
service" in claim 2. However, it is impossible to assume 
specifically what matter is meant by "associated with" and 
specifically what is meant by "'a key associated with". Thus, 
the invention of claim 2 is unclear. 

Further, from among the inventions of claims 3 to 63, the 
invention(s) of the claim( s ) for which the same rejection applies 
is (are) unclear. 

(10) -(14) (*Agent Remarks: We(Tani & Abe) can attend to the 
rejections raised here because of the Japanese Version. ) 

(15) Claim 7 recites "sending some cryptographical 
information to prove knowledge of the user ' s key while submitting 
the request". However, it is impossible to grasp what matter 
is meant by this recitation and how the invention of claim 5 
is limited by this recitation. Thus, the invention of claim 
7 is unclear. 



(16) -(20) (*Agent Remarks: We(Tani S Abe) can attend to the 
rejections raised here because of the Japanese version.) 



(21) Claim 13 recites "verifying ... an authenticity of 
the reply". However, it is impossible to grasp what matter is 
meant by this recitation. Thus, the invention of claim 13 is 
unclear . 

Further, for the same reason as set out above , the invention 
of claim 23 is unclear. 

(22) Claim 15 recites "creating, at the ticket issuing 
entity, a ticket containing the identity string and a session 
key Kxa encrypted with a key K A associated with the online service , 
as follows . . . sending the ticket along with the session key 
Kxa from the ticket issuing entity to the game console . . . passing 
the ticket from the game console to the online service along 
with data encrypted using the session key However, 
it is unclear how to decrypt the ticket encrypted with the key 
associated with the online service, and how to use the session 
key, in the game console. Thus, the invention of claim 15 is 
unclear . 

(23) -(24) (*Agent Remarks: We(Tani & Abe) can attend to the 
rejections raised here because of the Japanese Version.) 

(25) Claim 25 recites "a single ticket ... that can be 
used to authenticate the multiple user identities to the online 
service". However, it is impossible to grasp what matter is 
meant by "authenticate ... to the online service". Further, 
from this recitation, it is impossible to assume specifically 
what ticket it is. Thus, the invention of claim 25 is unclear. 

Further , for the same reason as set out above , the inventions 
of claims 26 to 38, and 61 to 63 are unclear. 

(26) Claim 27 recites "cryptographically deriving the 
user identities from information associated with the users". 
However, it is impossible to grasp what matter is meant by this 
recitation. Thus, the invention of claim 27 is unclear. 

(27) Claim 3 4 recites "encrypting the ticket with a key 
associated with the third party". However, it is impossible 
to grasp what matter is meant by this recitation. Thus, the 
invention of claim 34 is unclear. 



(28) As to "a random nonce" in claim 54, it is impossible 
to grasp how "the random nonce" is defined as a structure . Thus , 
the invention of claim 54 is unclear. 

(29) -(31) {*Agent Remarks: We(Tani & Abe) can attend to the 
rejections raised here because of the Japanese Version. ) 

(32) Claim 59 recites "a game console, comprising ... to 
obtain authentication of multiple users of the game console 
together in a single request/reply exchange with the 
authentication entity". However, it is impossible to grasp 
based upon what configuration "authentication of multiple users 
of the game console is obtained together in a single request /reply 
exchange with the authentication entity" . Thus, the invention 
of claim 5 9 is unclear. 

[Reason 5] 

The present invention(s) as claimed in claim(s) set forth 
below would have been obvious to one having ordinary skill in 
the art, to which the inventions ( s ) pertain(s), prior to the 
filing date of the present application, on the basis of an 
invention(s) described in the publication ( s ) set forth below 
as distributed in Japan or foreign countries or an invention(s) 
made available to the public through the telecommunication line 
prior to the filing date of the present application . Therefore , 
the present invention(s) is (are) unpatentable under the 
provision of Section 29 , Paragraph 2 of the Japanese Patent Law. 

Remarks (See a Reference List given below) 

- Claim 1 

- References 1 to 3 
Remark : 

One skilled in the art could easily arrive at the present 
invention of claim 1 from the invention of reference 1 (see claim 
7, paragraphs [0069] to [0088], and Figs. 2 and 10, etc., in 
particular) in combination with the feature of authenticating 
an identification code (an ID code) and a name of a cartridge 
mounted on an operating device corresponding to each player of 
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the invention of reference 2 (see paragraphs [0036] to [0037], 
[0044] to [0045], Figs. 11, 15, and 17, etc., in particular) , 
and. the idea that a local server stores authentication requests 
from a plurality of portable terminals and transmits the received 
authentication requests together to an authentication server 
of the invention of reference 3 ( see paragraphs [0110] to [0125], 
in particular) . 

- Claims 2 to 38, and 51 to 63 

- References 1 to 3 
Remark : 

A Kerberos protocol is conventionally well known as a 
technique of authenticating a client (see e.g. "The Network 
Security Design Guide" , Merike Kaeo , Japan, SOFTBANK Publishing 
Corp. , December 27, 2000, First Edition , ISBN4-7973-1344-7 etc. ) 
It is mere addition of well-known art to employ the Kerberos 
protocol when authenticating a client in the invention of 
reference 1 . 

In addition, one skilled in the art could appropriately 
choose which information to include in an authentication request 
or a reply. 

Thus, one skilled in the art could easily arrive at the 
present inventions of claims 2 to 38, and 51 to 63 from the 
inventions of references 1 to 3 in combination with the above 
well-known art. 

Reference List 

1. Japanese Patent Application Laid-open No. 2000-157724 

2. Japanese Patent Application Laid-open No. Hei 11-207034 

3. Japanese Patent Application Laid-open No. Hei 10-243015 

Record of Search Result of Prior Art Literature 

Technical Field Searched 
IPC 

A63F 9/00 to 13/12, G09C 1/00 to 5/00 
H04K 1/00 to 3/00, H04L 9/00 to 9/04 
G06F 15/00, G06Q 10/00 to 90/00 
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Prior Art Literature 

1. Japanese Patent Application Laid-open No . Hei 10-327147 

This record of search result of prior art literature does 
not constitute reason for rejection. 
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